DisclosureLens
Social EngineeringEducationEducationPhishingCustomer Data InvolvedTargetedAuthenticationFinancial accountIdentity (basic)Government IDPHIHealth (basic)HighContained

Washington State Opportunity Scholarship Foundation

bd_8a1b6794c6fc18a0 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 9, 2025

Filed

Jul 25, 2025

To disclose

28 weeks

Affected

16,668state residents only

Confidence

70%
Full breach record for Washington State Opportunity Scholarship Foundation →2 incidents on file

Washington State Opportunity Scholarship Foundation reported a phishing-based cyberattack affecting 16,668 Washington residents. The incident occurred between August 14, 2024, and January 17, 2025. The foundation was made aware of the breach on January 9, 2025. Affected data included names, dates of birth, and Social Security numbers. The organization offered one year of credit monitoring services to affected individuals.

Washington clock✗ WA AG >90d28 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 148 days
discovery → filing · 28 weeks / 197 days

Aug 14, 2024

Begins

Jan 9, 2025

Discovered

Jul 25, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed16,668 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.